akf-forum/routes/users.js

const { User } = require("../classes");
const db = require("quick.db")

const { Router } = require("express")
const error = require("../errors/error")

const app = Router();

app.get("/", (req, res) => {
    if (!req.session.loggedin) return res.redirect('/login');
    const user = new User().getId(req.session.userid)


    const users = db.get("users").slice(0);

    const links = users.filter(user => !user.deleted).map(user => "/users/" + user.id);
    return res.render("users", { users, links, user })



});
app.get("/:id", (req, res) => {
    if (!req.session.loggedin) return res.redirect('/login');
    const user = new User().getId(req.session.userid)
    const { id = null } = req.params;
    const member = new User().getId(req.params.id);


    if (member && (user.admin || !member.deleted)) {
        const message = db.get("messages").filter(message => message.author.id === Number(id)).length
        const thread = db.get("threads").filter(thread => thread.author.id === Number(id)).length

        const counts = { message, thread }
        res.render("user", { user, member, counts })
    }
    else error(res, 404, "We have not got this user.");

});
app.post("/delete/:id", (req, res) => {
    if (!req.session.loggedin) return res.redirect('/login');
    const user = new User().getId(req.session.userid);
    if (!user.admin)
        return error(res, 403, "You have not got permission for this.");

    const id = req.url.slice(9 + 3)
    const member = new User().getId(id);
    if (!member || member.deleted) return error(res, 404, "We have not got any user declared as this id.");
 
    member.deleted = true;
    member.write();
    
    res.redirect("/admin");
});

module.exports = app;